Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS200570.roa
File:                     AS200570.roa (raw, json)
Hash identifier:          oCJwkUDaQYwU3Ffcm8Zx9YJpu/br4cLkGsNbtjfOEqE=
Subject key identifier:   1A:B3:C7:AE:25:E4:3D:F7:F4:CF:96:B1:8B:2E:0F:D3:77:AB:03:01
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       19E907854627F537A80CF97B0FB3048DAE2E6730
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS200570.roa
Signing time:             Thu 23 Feb 2023 18:37:40 +0000
ROA not before:           Thu 23 Feb 2023 18:32:40 +0000
ROA not after:            Thu 22 Feb 2024 18:37:40 +0000
asID:                     200570
IP address blocks:        2a07:54c4:174d::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:e9:07:85:46:27:f5:37:a8:0c:f9:7b:0f:b3:04:8d:ae:2e:67:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Feb 23 18:32:40 2023 GMT
            Not After : Feb 22 18:37:40 2024 GMT
        Subject: CN=1AB3C7AE25E43DF7F4CF96B18B2E0FD377AB0301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5d:d2:7d:06:e8:b8:20:90:8f:da:47:52:41:
                    f5:62:83:08:01:6b:76:bd:18:d4:f6:7f:b6:e0:8f:
                    6d:3b:da:da:21:c0:06:2e:4f:dd:80:de:8d:52:71:
                    95:89:86:b0:45:b2:ac:a5:7f:d2:f2:10:d5:2d:62:
                    cf:f5:b6:75:54:ef:c4:20:f7:13:2a:90:14:54:f4:
                    f8:d5:ff:cc:99:98:4a:f5:8f:4f:8e:c8:ac:88:e1:
                    2e:f7:48:29:c1:d2:44:89:8b:a2:b5:e4:b0:c7:9e:
                    2a:1c:7a:57:64:d7:26:03:dd:c9:ac:16:c7:85:9e:
                    d5:58:14:fb:ee:f3:65:9a:43:9a:a4:af:e9:a9:fc:
                    26:84:29:0b:36:80:67:f2:25:b3:a2:8e:51:78:24:
                    6a:44:45:49:ee:32:0c:fc:13:26:47:68:a2:42:4c:
                    ff:d1:54:e9:7f:bd:e0:0b:a5:b2:18:9d:38:d6:a0:
                    e5:5a:0c:db:ac:1d:f4:0e:e7:ed:31:af:b2:89:23:
                    18:f6:a1:28:9e:79:f0:02:17:46:85:37:08:76:84:
                    47:0d:ee:ed:4c:89:1f:41:98:8a:2c:e3:9a:bc:b1:
                    f7:7e:ea:e8:e7:a4:14:73:15:da:a6:53:74:6e:2c:
                    ce:e6:a9:5e:20:64:69:c5:bd:47:d8:ab:47:3d:ca:
                    ec:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B3:C7:AE:25:E4:3D:F7:F4:CF:96:B1:8B:2E:0F:D3:77:AB:03:01
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS200570.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c4:174d::/48

    Signature Algorithm: sha256WithRSAEncryption
         e0:d9:78:9e:fa:d1:b4:77:ba:f6:ce:b0:1b:0c:7f:06:7d:01:
         54:9f:fd:a3:bd:4e:b4:76:c2:de:14:38:53:a6:0c:4b:e3:46:
         85:ca:d1:90:d4:55:c8:51:ae:f6:db:b7:39:5b:39:df:9e:7b:
         09:bf:a7:6a:64:a8:54:ad:2b:8c:09:3a:0b:0b:3d:4b:f4:a0:
         f8:96:d7:c7:76:35:2a:85:02:2f:3c:63:ef:47:81:68:ba:6d:
         32:b5:3f:85:9c:63:0a:da:3d:9b:79:03:88:49:c7:dc:93:65:
         f9:a9:40:59:12:6a:0e:f3:3d:c9:23:b8:e8:ba:ce:c5:00:3f:
         63:02:9f:4c:99:66:6e:58:4b:8b:a2:69:ca:d0:3f:b5:ff:84:
         b0:66:9d:a7:84:84:e2:1b:d3:af:1b:c7:0d:d7:7e:f2:2d:8a:
         1c:e9:09:c4:d3:2a:6a:4b:59:cb:1d:a9:13:8a:2f:45:f4:c8:
         3f:c0:0c:53:b7:64:e9:91:dd:e3:1f:00:2c:f2:07:05:f9:12:
         d8:2a:f4:49:13:b6:31:60:9c:e6:07:76:ff:0e:06:02:64:1d:
         eb:7b:fb:51:75:3b:5a:b6:41:87:09:9f:82:c7:60:6c:e9:b5:
         79:f2:8a:70:95:31:e5:22:f1:3a:8f:79:a4:0d:10:68:e8:13:
         db:1e:e2:fd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----